dea7eb497aa4ccdac01d9f60ef95ae00[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dea7eb497aa4ccdac01d9f60ef95ae00.bin
Size

119KB
MD5

dea7eb497aa4ccdac01d9f60ef95ae00
SHA1

c27b99a45c8fd5447edad83ce91c00ae23a29adc
SHA256

7e91720224780215934326e67b6e559746d481d7a427e1d074b204c29fc4d30a
SHA512

7b2f656a28b314553f9d46294e97890cc17e289f1c32d0187b8c6869192995f478bd5d9971cb5d27ecb30432f26509c5d5b1820f39c53f7fc13535fee04aa573
SSDEEP

3072:FuJEtwnnjdm4LkquzwG8HFvhh0oEMfpSdoUI/Cy0:FZwnjdvXBz1DHBSeUu90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dea7eb497aa4ccdac01d9f60ef95ae00.bin

Files

dea7eb497aa4ccdac01d9f60ef95ae00.bin
.exe windows:4 windows x86

08ef00c07bff6f69216415284393ec59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameW
SwitchToThread
HeapQueryInformation
IsBadStringPtrW
GetPrivateProfileIntA
BaseDestroyVDMEnvironment
GetEnvironmentVariableA
GetSystemTime
WerRegisterCustomMetadata
TerminateThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE